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[57] ABSTRACT 

Methods and apparatus for encoding compressed data 



streams efficiently, and methods and apparatus for de- 
coding the encrypted data streams efficiently and inex- 
pensively, are disclosed. In an encoder 10', an incoming 
data stream is fed to a Huffman coding block 10 that 
performs data compression. The output codewords of 
the Huffman coding block are fed to a forward error 
correction block 30, the output of which is a series of 
data blocks and associated parity data. The data blocks 
are fed to an error insertion block 32, which inserts a 
one-bit error in each data block. The parity data is fed to 
a first encryption block 34 that produces encrypted 
parity data. The output of the error insertion block 32, 
the encrypted parity data, and a synchronization word 
output by a sync generator 50 are fed to a multiplexer 
48. A seed generator block 36 generates random num- 
bers for use by the first encryption block 34 as seeds for 
encrypting the parity data. A multisession key register 
40 stores a multisession key employed as a seed in a 
second encryption block 38 to encrypt the random 
number seed. A secret serial number (SSN) read from a 
database 46 and stored in an SSN register 44 is em- 
ployed by a third encryption block 42 as a seed for 
encrypting the multisession key. The multiplexer out- 
puts a multiplex comprising the sync signal, SDP, ADP, 
and Reed-Solomon data blocks with their correspond- 
ing parity data. A decoder 14' receives the multiplex 
data and recovers the original data. 
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gram data is represented by the sequence of numbers 18 

METHODS AND APPARATUS FOR SCRAMBLING at the input of the encoder 10 and the output of the 

AND UNSCRAMBLING COMPRESSED DATA decoder 14. The compressed data (sequence of code- 

sti kEAMS words) is represented by the sequence of bit patterns 20. 

5 Huffman coding is a variable length coding (VLC) 
FIELD OF THE INVENTION process that encodes frequent events with fewer bits 
The present invention relates generally to the fields of ^an encodes infrequent events. As illustrated in the 
data compression and data encryption. More particu- following table (which is also shown in FIG. 1), van- 
laxly, the present invention relates to methods and appa- able length codewords are preassigned to the symbols 
ratus for encrypting, or scrambling, digital data com- 10 representable in the system in accordance with a Huff- 
pressed into variable length codewords. The invention man code, 
may advantageously be applied in digital video and 

audio systems to provide efficient and inexpensive en- — ■ — — — — — — — __ _ 

cryption and decryption. HUFFMAN TABLE 

IS Symbol Codeword 

BACKGROUND OF THE INVENTION 

The background of the present invention is described 
herein in the context of pay television systems, such as 
cable television and direct broadcast satellite (DBS) 
systems, that distribute a variety of program services to 20 
subscribers, but the invention is by no means limited 
thereto except as expressly set forth in the accompany- 
ing claims. Jn a digital video system, identical code books, typi- 

In the pay television industry, programmers produce cal!y stored in rcad onl memorV( m employed at the 

programs for distribution to various remote locations. A 25 ^ cnco(Jer ^ dccoder Jocations Thc dccodcr . Mt 

uZ**™'™*™? °! V h C0 ' ? Udl °' an ^°*? r / e : t0 "P«* c the reccived codewords to perform the 

* n "* d0Be ^ ft0n "« and teletext dcc0 £ prcssion proccsS) dcspitc ^ fact th £ ^ codc . 

cable television operators. In the case of cable television 30 ^ b J£*J ^ d /°^ e ^ p1 ^ f ^ K1 t \ 

operators, the services transmitted via satellite are re- ?™ rcceiv < d ' } h < d ' codcr wo * e t0 «*« f 

ceived at the operator's cable head-end installations. A ^L*™™L*?* StT !*? mt ° th ' codewords 0 ' 

cable operator typically receives programs and other . 100 ' ^ „ 101 * Tv P lcal * a synchronization pattern 

services from many programmers and then selects the * ""P 1 ^ to separate large groups of codewords, 

programs/services it wishes to distribute to its subscrib- 35 However, the decoder still must be able to separate the 

crs. In addition, a cable operator may insert locally ^dividual codewords between the synchronization 

produced services at the cable-head end. The selected patterns. 

services and locally produced services are then trans- Thus ' the most efficient compression is obtained 

mitted to the individual subscribers via a coaxial cable when vanablc length coding (VLC) is used. However, 

distribution network. In the case of DBS subscribers, 40 because of the variable codeword lengths, if a single bit 

each subscriber is capable of receiving a satellite down- m0T occurs, the Huffman decoder will lose synchroni- 

link from the programmers directly. zation and be unable to recover any data following the 

In the past, pay television systems, including cable m0T * For example, if the data stream "0100101" were 

and DBS systems, have operated in the analog domain. changed to "1 100101" due to an erroneous inversion of 

Recently, however, the pay television industry has 45 the first bit, the decoder would be unable to decide 

begun to move toward all digital systems wherein, prior whether the received data stream should be interpreted 

to transmission, all analog signals are converted to digi- as "1100", "101" (two distinct codewords), or "110", 

tal signals. Digital signal transmission offers the advan- "°'\ "WV f (three distinct codewords). In view of the 

tage that digital data can be processed at both the trans- problems associated with decoding variable length 

mission and reception ends to improve picture quality. 50 codewords in most real world environments, where bit 

Further, digital data compression techniques have been errors are likely, forward error correction (FEC) 

developed that achieve high signal compression ratios. should be employed to detect and correct errors before 

Digital compression allows a larger number of individ- Huffman coding is performed. For example, the Reed- 

ual services to be transmitted within a fixed bandwidth, Solomon algorithm is a well known FEC technique 

Bandwidth limitations are imposed by both satellite 55 whereby parity data is computed and transmitted with 

transponders and coaxial cable distribution networks, data blocks of a prescribed length. The parity data cna- 

and therefore digital compression is extremely advanta- bles the decoder to detect and correct errors in the 

geous. Further background on digital television can be codewords before decompressing the codewords to 

found in U.S. patent application Ser. No. 968,846, Oct recover the original data. 

30, 1992, titled System and Method for Transmitting a 60 Theft is also a serious problem in the pay television 

Plurality of Digital Services, which is hereby incorpo- world. Thieves have been known to illegally decode 

rated by reference as if fully set forth herein. program data with home made or stolen decoders. 

FIG. 1 schematically depicts a portion of a digital Highly sophisticated encryption techniques for scram- 

television system. This system comprises an encoder 10, bling the program data before it is distributed to cable 

a digital channel 12, and a decoder 14. The encoder and 65 television operators and individual subscribers are 

decoder each have access to identical Huffman lookup known. For example, the Data Encryption Standard 

tables (or code books) 16 for use in compressing and (DES), described in NBS, Data Encryption Standard 

decompressing digital program data. Exemplary pro- (FIPS Publication 46), National Bureau of Standards, 
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U.S. Department of Commerce, Washington, D C. third decryption means, and the means for storing an 
(January, 1977)), and the Riveat-Shamir-Adleman SSN, are embodied in a secure microprocessor, making 
(RSA) scheme, described in R. L. Rivest, A. Shamir, it extremely difficult for an unauthorized person to 
and L. Adleman, A Method of Obtaining Digital Signa- discover the SSN and decryption processes. 
turts and Public-key Cryptosystems, Communications of 5 The present invention also provides methods and 
the ACM 21(2), pp. 120-126 (February, 1978)), are well apparatus for decoding the encrypted data. According 
known. However, decryption of high speed data re- to the invention, a decoder receives an incoming data 
quires complex, specially designed circuitry, usually in . stream and demultiplexes the data stream into variable 
the form of application specific integrated circuits (AS- length codewords representing a compressed data 
ICs). The ASICs are expensive but are needed to per- 10 stream, encrypted parity data, a system data packet 
form decryption rapidly, in real time. Therefore, the (SDP) defining an encrypted seed, and an addressable 
benefit gained by employing encryption to deter pro- data packet (ADP) defining an encrypted muitisession 
gram theft is offset by the cost incurred by the decryp- key. The ADP is then decrypted to derive the multisev 
tion circuitry. sion key; the SDP is decrypted in accordance with the 

Accordingly, a primary goal of the present invention 15 muitisession key to derive the seed; the parity data is 
is to provide methods and apparatus for encrypting decrypted in accordance with the seed; errors in the 
digital data streams in a manner that enables decryption codewords are corrected in accordance with the de- 
in real time with inexpensive hardware. crypted parity data; and a decompressed data stream is 

cinni A _ „ Tvnmv^vr generated in accordance with the corrected codewords. 

SUMMARY OF THE INVENTION 20 Thus, in preferred embodiments of the invention, a 

The present invention provides methods and appara- deliberate error is added to the Huffman codewords in 
tus for encoding compressed data streams efficiently, the encoder and the associated FEC parity bytes are 
and methods and apparatus for decoding the encrypted encrypted. The parity bytes are much smaller than the 
data streams efficiently and inexpensively. Methods for coded data, and thus can be decrypted off-line in a 
encoding data in accordance with the present invention 23 microprocessor. Consequently, decryption of high- 
comprise the steps of: compressing an incoming data speed program data is accomplished effectively by 
stream into variable length codewords; generating error background decryption of the FEC parity bytes, en- 
correction parity data for the codewords; introducing abling the FEC means in the decoder to correct the 
an error into the codewords; encrypting the parity data; deliberate error. The present invention simplifies en- 
and transmitting the codewords and encrypted parity 50 cryption and decryption of high-speed program data by 
data. employing the FEC system and hardware, which is 

A preferred embodiment of the present invention typically used for correction of noise-induced errors, 
further comprises the steps of generating a seed for for an additional purpose: to provide conditional access 
encrypting the parity data, encrypting the seed, and to the program data. Off-line (or background, or non- 
transmitting the encrypted seed as a system data packet 35 real time) hardware can be used to perform real time 
(SDP). decryption of the high-speed program data. Decoder 

In addition, embodiments of the invention may in- cost may therefore be significantly reduced. Other fea- 
clude the steps of employing a muitisession key to en- tures and advantages of the present invention are dis- 
crypt the seed, encrypting the muitisession key, and closed below. 

Uramitting the encrypted I multbeuion key ts tn ad- 40 DESCRIPTION OF THE DRAWINGS 

dressable data packet (ADP). 

Embodiments of the invention may also include the FIG. 1 is a schematic representation of a digital tele- 
step of employing a secret serial number (SSN) to en- vision system comprising an encoder 10, a digital chan- 
crypt the muitisession key. ncl 12, and a decoder 14. 

The encrypted parity data may advantageously be 45 FIG. 2 is a block diagram of an encoder 10' in accor- 
transmitted before the codewords are transmitted. This dance with the present invention, 
provides the decoder more time to decrypt the parity FIG. 3 is a block diagram of a decoder 14' in accor- 
ds ta, and is useful in that the decrypted parity data is dance with the present invention, 
required by the decoder when correctmg thedelib^te DETAILED DESCRIPTION OF PREFERRED 
error in the program data. In addition, the step of gener- 50 EMBODIMENTS 
ating error correction parity data may advantageously 

employ a Reed-Solomon forward error correction pro- FIG. 2 schematically depicts one embodiment of an 
cess, whereby parity words and associated data blocks encoder 10' in accordance with the present invention, 
are generated. The step of encrypting the parity data As shown, an incoming data stream is fed to a Huffman 
may comprise inserting one error per Reed-Solomon 55 coding block 10 that performs data compression. The 
data block, and the step of compressing an incoming output codewords of the Huffman coding block are fed 
data stream into variable length codewords may em- to a Reed-Solomon forward error correction block 30, 
ploy Huffman coding to generate variable length Huff- the output of which is a series of data blocks and aasoci- 
man codewords. ated parity data. The data blocks are fed to an error 

Preferred embodiments may also include the steps of 60 insertion block 32, which inserts a one-bit error in each 
generating a synchronization word; multiplexing the data block. The parity data is fed to a first encryption 
synchronization word with the codewords and en- block 34 that employs a known encryption algorithm, 
crypted parity data before transmitting the codewords e.g., the DES algorithm, to produce encrypted parity 
and encrypted parity data; and transmitting the multi- data. The output of the error insertion block 32, the 
plexed data. 65 encrypted parity data, and a synchronization word out- 

The present invention also provides encoders includ- put by a sync generator 50 are fed to a multiplexer 48. In 
ing means for carrying out the above-described meth- addition, a seed generator block 36 generates random 
ods. In one preferred embodiment, the first, second, and numbers for use by the first encryption block 34 as seeds 
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for encrypting the parity data. A multisession key regis- 
ter 40 stores a multisession key employed as a seed in a 
second encryption block 38 to encrypt the random 
number seed. The encrypted random number seed is 
referred to herein as a system data packet (SDP). A S 
secret serial number (SSN) read from a database 46 and 
stored in an SSN register 44 is employed by a third 
encryption block 42 as a seed for encrypting the mul- 
tisession key. The encrypted multisession key output by 
the third encryption block 42 is referred to herein as an 10 
addressable data packet (ADP). As shown, the SDP 
and ADP are also fed to the multiplexer 48. The multi- 
plexer outputs a multiplex comprising the sync signal, 
SDP, ADP, and Reed-Solomon data blocks with their 
corresponding parity data. In one example of the pres- 15 
ent invention, the random number seed changes at a rate 
of eight times per second; the multisession key is 
changed at a rate of one time per month; and the secret 
serial number is a fixed number stored in the database 
46. There is a unique SSN for each authorized decoder 20 
in the system. 

FIG. 3 schematically depicts one embodiment of a 
decoder in accordance with the present invention. As 
shown, multiplex data 52 is received and fed to a demul- 
tiplexer 54, which separates out the Huffman data, en- 25 
coded parity data, SDP, and ADP. The Huffman data 
blocks are fed to a Reed-Solomon FEC block 56, which 
outputs corrected Huffman data. Since the FEC block 
56 requires decrypted parity data to perform error cor- 
rection on the program data, the encrypted parity data 30 
is fed to a first decryption block 58, which decrypts the 
parity data in accordance with the decryption process 
corresponding to the encryption process employed by 
the encoder. The first decryption block 58 employs the 
random number seed generated by the random number 35 
generator of the encoder. Thus, the SDP (which is the 
encrypted version of the random number seed) must 
also be decrypted to obtain the random number seed. 
To decrypt the SDP, the ADP is decrypted to produce 
the multisession key, the latter being employed as a seed 40 
in a second decryption block 60. The ADP is decrypted 
by employing the decoder's secret serial number, which 
is stored in memory 64 inside the decoder, as a seed for 
a third decryption block 62. The output of the Reed- 
Solomon FEC block 56 is a series of compressed but 45 
corrected Huffman codewords. The corrected Huffman 
codewords are fed to a Huffman decoder 14, which 
employs a lookup table 16 to produce the original com- 
pressed data. 

In preferred embodiments of the invention, the first, 50 
second and third decryption blocks, as well as the de- 
coder's secret serial number, are embodied in a secure 
microprocessor, for example, a Motorola SC21 or SC27 
secure microprocessor. Such a microprocessor has a 
limited number of pins (e.g., six) and employs extraordi- 55 
nary measures to prevent an unauthorized person from 
discovering the SSN or the decryption procedures em- 
ployed in the decoder. 

It will be appreciated by those skilled in the art that 
changes could be made to the embodiments described 60 
herein without departing from the inventive concepts 
thereof. For example, the present invention is not lim- 
ited to systems employing any particular encryption 
technique (e.g., DES) or compression technique (e.g., 
Huffman coding), although the invention is especially 65 
well suited for systems employing variable length cod- 
ing, since the latter systems must employ forward error 
correction. In addition, embodiments of the invention 
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may introduce more than one error into the codewords 
or introduce one or more errors into some but not all 
codewords. It is understood, therefore, that the scope of 
protection of the following claims is not limited to the 
particular embodiments disclosed, but is broad enough 
to encompass all modifications which are within the 
true scope and spirit of the invention. 
What is claimed is: 

1. A method for encoding data, comprising the steps 
of: 

(a) compressing an incoming data stream into vari- 
able length codewords; 

(b) generating error correction parity data for said 
codewords; 

(c) introducing an error into said codewords; 

(d) encrypting said parity data; and 

(e) transmitting said codewords and encrypted parity 
data. 

2. A method for encoding data as recited in claim 1, 
further comprising the steps of generating a seed for 
encrypting said parity data, encrypting said seed, and 
transmitting the encrypted seed as a system data packet 
(SDP). 

3. A method for encoding data as recited in claim 2, 
further comprising the steps of employing a multises- 
sion key to encrypt said seed, encrypting said multises- 
sion key, and transmitting the encrypted multisession 
key as an addressable data packet (ADP). 

4. A method for encoding data as recited in claim 3, 
comprising the step of employing a secret serial number 
(SSN) to encrypt said multisession key. 

5. A method for encoding data as recited in claim 1, 
wherein said encrypted parity data is transmitted before 
said codewords are transmitted. 

6. A method for encoding data as recited in claim 1, 
wherein the step of generating error correction parity 
data comprises employing a Reed-Solomon forward 
error correction process, whereby parity words and 
associated data blocks are generated; and the step of 
encrypting said parity data comprises inserting at least 
one error per data block, 

7. A method for encoding data as recited in claim 1, 
wherein the step of compressing an incoming data 
stream into variable length codewords comprises em- 
ploying Huffman coding to generate variable length 
Huffman codewords. 

8. A method for encoding data as recited in claim 1, 
comprising the steps of generating a synchronization 
word; multiplexing said synchronization word with said 
codewords and encrypted parity data before transmit- 
ting said codewords and encrypted parity data; and 
transmitting the multiplexed data. 

9. A method for encoding data as recited in claim 1, 
further comprising the steps of: generating a seed for 
encrypting said parity data; encrypting said seed by 
employing a multisession key; encrypting said multises- 
sion key by employing a secret serial number (SSN); 
generating a synchronization word; multiplexing said 
synchronization word, codewords, encrypted parity 
data, encrypted seed, and encrypted multisession key, 
before transmitting said codewords and encrypted par- 
ity data; and transmitting the multiplexed data. 

10. A method for encoding data as recited in claim 9, 
wherein the step of generating error correction parity 
data comprises employing a Reed-Solomon forward 
error correction process, whereby parity words and 
associated data blocks are generated; the step of en- 
crypting said parity data comprises inserting at least one 
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error per <Uta block; and the step of compressing an 
incoming data stream into variable length codewords 
comprises employing Huffman coding to generate vari- 
able length Huffman codewords. 

11. An apparatus for encoding data, comprising: 

(a) means for compressing an incoming data stream 
into variable length codewords; 

(b) means for generating error correction parity data 
for said codewords; 

(c) means for introducing an error into said code- 
words; 

(d) means for encrypting said parity data; and 
(c) means for transmitting said codewords and en- 
crypted parity data. 

12. An apparatus for encoding data as recited in claim 

11, further comprising means for generating a seed for 
encrypting said parity data, means for encrypting said 
seed, and means for transmitting the encrypted seed as 
a system data packet (SDP). 

13. An apparatus for encoding data as recited in claim 20 

12, further comprising means for employing a multi ses- 
sion key to encrypt said seed, means for encrypting said 
multisession key, and means for transmitting the en- 
crypted multisession key as an addressable data packet 
(ADP). 

14. An apparatus for encoding data as recited in claim 

13, comprising means for employing a secret serial num- 
ber (SSN) to encrypt said multisession key. 

15. An apparatus for encoding data as recited in claim 
11, comprising means for transmitting said encrypted 30 
parity data before transmitting said codewords. 

16. An apparatus for encoding data as recited in claim 
11, wherein the means for generating error correction 
parity data comprises means for employing a Reed- 
Solomon forward error correction process, whereby 35 
parity words and associated data blocks are generated; 
and the means for encrypting said parity data comprises 
means for inserting at least one error per data block. 



25 



means for compressing an incoming data stream into 
variable length codewords comprises means for em- 
ploying Huffman coding to generate variable length 
Huffman codewords. 

21. An apparatus for decoding data, comprising: 

(a) demultiplexer means for receiving an incoming 
data stream and demultiplexing said data stream 
into variable length codewords representing a 
compressed data stream, encrypted parity data, a 
system data packet (SDP) defining an encrypted 
seed, and an addressable data packet (ADP) defin- 
ing an encrypted multisession key; 

(b) first decryption means for decrypting said ADP to 
derive said multisession key; 

(c) second decryption means for decrypting said SDP 
in accordance with said multisession key to derive 
said seed; 

(d) third decryption means for decrypting said parity 
data in accordance with said seed; 

(e) error correction means for correcting errors in 
said codewords in accordance with the decrypted 
parity data; and 

(0 decompression means for generating a decom- 
pressed data stream in accordance with the cor- 
rected codewords. 

22. An apparatus for decoding data as recited in claim 

21, further comprising means, coupled to said first de- 
cryption means, for storing a secret serial number (SSN) 
for use in decrypting said ADP. 

23. An apparatus for decoding data as recited in claim 

22, wherein said first, second, and third decryption 
means, and said means for storing an SSN, are embodied 
in a secure microprocessor. 

24. An apparatus for decoding data as recited in claim 
21, wherein said decompression means comprises a 
Huffman decoder and a look up table. 

25. An apparatus for decoding data as recited in claim 
21, wherein said error correction means comprises 
means for employing a Reed-Solomon forward error 



17. An apparatus for encoding data as recited in claim 
11, wherein the means for compressing an incoming 40 correction process to correct errors in said codewords, 
data stream into variable length codewords comprises 26. An apparatus for decoding data as recited in claim 
means for employing Huffman coding to generate vari- 23, wherein said decompression means comprises a 
able length Huffman codewords. Huffman decoder and a look up table; and said error 

18. An apparatus for encoding data as recited in claim correction means comprises means for employing a 
11, comprising means for generating a synchronization 45 Reed -Solomon forward error correction process to 



word; means for multiplexing said synchronization 
word with said codewords and encrypted parity data 
before transmitting said codewords and encrypted par- 
ity data; and means for transmitting the multiplexed 
data. 30 

19. An apparatus for encoding data as recited in claim 
11, further comprising: means for. generating a seed for 
encrypting said parity data; means for encrypting said 
seed by employing a multisession key; means for en- 
crypting said multisession key by employing a secret 55 
serial number (SSN); means for generating a synchroni- 
zation word; means for multiplexing said synchroniza- 
tion word, codewords, encrypted parity data, en- 
crypted seed, and encrypted multisession key, before 
transmitting said codewords and encrypted parity data; 60 
and means for transmitting the multiplexed data. 

20. An apparatus for encoding data as recited in claim 
19, wherein the means for generating error correction 
parity data comprises means for employing a Reed- 
Solomon forward error correction process, whereby 65 
parity words and associated data blocks are generated; 
the means for encrypting said parity data comprises 
means for inserting one error per data block; and the 



correct errors in said codewords. 

27. A method for decoding data, comprising the steps 

of: 

(a) receiving an incoming data stream and demulti- 
plexing said data stream into variable length code- 
words representing a compressed data stream, en- 
crypted parity data, a system data packet (SDP) 
defining an encrypted seed, and an addressable data 
packet (ADP) defining an encrypted multisession 
key; 

(b) decrypting said ADP to derive said multisession 
key; 

(c) decrypting said SDP in accordance with said 
multisession key to derive said seed; 

(d) decrypting said parity data in accordance with 
said seed; 

(e) correcting errors in said codewords in accordance 
with the decrypted parity data; and 

(0 generating a decompressed data stream in accor- 
dance with the corrected codewords. 

28. A method for decoding data as recited in claim 27, 
comprising employing a secret serial number (SSN) to 
decrypt said ADP. 
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29. A method for decoding data as recited in claim 27, 
wherein the step of generating a decompressed data 
stream comprises employing a Huffman look up table to 
decompress said codewords. 

30. A method for decoding data as recited in claim 27, 
wherein the step of correcting errors in said codewords 
comprises employing a Reed-Solomon forward error 
correction process to correct said errors. 

31. A method for decoding data as recited in claim 27 F 
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wherein the step of generating a decompressed data 
stream comprises employing a Huffman look up table to 
decompress said codewords; and the step of correcting 
errors in said codewords comprises employing a Reed- 
Solomon forward error correction process to correct 
said errors. 
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